~25 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Version | Info | OS | Devicetype | Count |
Percent |
|---|---|---|---|---|---|---|---|
| no match | 4154 | 16.15 | |||||
| irc | Dancer ircd | 4019 | 15.625 | ||||
| pop3 | Dovecot pop3d | 2879 | 11.193 | ||||
| chat | AIM or ICQ server | 2004 | 7.791 | ||||
| http | GeoVision GeoHttpServer for webcams | webcam | 1532 | 5.956 | |||
| http | 1175 | 4.568 | |||||
| http | WangWnagSimpleServer | 1.0 | 1056 | 4.106 | |||
| pop3 | qmail pop3d | 1020 | 3.966 | ||||
| ovm-manager | Oracle VM Manager | 753 | 2.928 | ||||
| java-rmi | Java RMI | 449 | 1.746 | ||||
| http | lighttpd | 1.4.19 | 418 | 1.625 | |||
| http | Boa HTTPd | 0.94.14rc21 | 355 | 1.38 | |||
| http | Microsoft IIS httpd | 343 | 1.334 | ||||
| http | Virata-EmWeb | 6.0.1 | 228 | 0.886 | |||
| http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 202 | 0.785 | |
| ssl | TLS | 1.0 | 193 | 0.75 | |||
| http | lighttpd | 1.4.29 | 192 | 0.746 | |||
| http | thttpd | 2.25b | 174 | 0.676 | |||
| http | GoAhead-Webs httpd | 159 | 0.618 | ||||
| http | World Client WDaemon httpd | 2.0.3 | Alt-N MDaemon webmail | Windows | 144 | 0.56 | |
| pop3 | CommuniGate Pro | 5.0.14 | 128 | 0.498 | |||
| pop3 | 120 | 0.467 | |||||
| http | World Client WDaemon httpd | 4.0 | Alt-N MDaemon webmail | Windows | 114 | 0.443 | |
| pop3 | Qpopper pop3d | 4.0.9 | 101 | 0.393 | |||
| http | httpd 1.1 | 101 | 0.393 | ||||
| vnc | VNC | protocol 3.8 | 93 | 0.362 | |||
| ssh | protocol 1.5 | 92 | 0.358 | ||||
| http | thttpd | 2.24 | 90 | 0.35 | |||
| http | Apache Tomcat/Coyote JSP engine | 1.1 | 77 | 0.299 | |||
| pop3 | Courier pop3d | 75 | 0.292 | ||||
| http | Boa HTTPd | 0.94.13 | 64 | 0.249 | |||
| telnet | Precidia serial2ethernet gateway telnetd | model iPocket232 | 61 | 0.237 | |||
| telnet | 61 | 0.237 | |||||
| ftp | Microsoft ftpd | Windows | 53 | 0.206 | |||
| smtp | Sendmail | 8.14.4/8.14.4 | Unix | 51 | 0.198 | ||
| pop3 | MailEnable POP3 Server | Windows | 51 | 0.198 | |||
| socks5 | 49 | 0.191 | |||||
| arcserve | ARCserve Discovery | 49 | 0.191 | ||||
| ssh | OpenSSH | 4.3 | protocol 2.0 | 48 | 0.187 | ||
| pop3 | Dovecot DirectAdmin pop3d | 47 | 0.183 | ||||
| http | lighttpd | 1.4.20 | 47 | 0.183 | |||
| http | Network Camera | 45 | 0.175 | ||||
| http | MiniServ | 0.01 | Webmin httpd | 44 | 0.171 | ||
| http | Hikvision-Webs | 43 | 0.167 | ||||
| socks5 | Username/password authentication required | 40 | 0.156 | ||||
| http | thttpd | 38 | 0.148 | ||||
| http | Boa HTTPd | 0.94.14rc18 | 38 | 0.148 | |||
| pop3 | ipop3d | 2003.83rh | 37 | 0.144 | |||
| http | Router | 36 | 0.14 | ||||
| ftp | 36 | 0.14 | |||||
| http | Wireless Network Camera with Pan | Tilt | 35 | 0.136 | |||
| pop3-proxy | kingate pop3-proxy | 30 | 0.117 | ||||
| http | RealVNC | 4.0 | 30 | 0.117 | |||
| http | lighttpd | 29 | 0.113 | ||||
| nntp | INN nntpd | posting ok | 28 | 0.109 | |||
| http-proxy | Squid http proxy | 2.7.STABLE9 | 26 | 0.101 | |||
| directconnect | Direct Connect P2P | Windows | 24 | 0.093 | |||
| remoting | MS .NET Remoting services | 23 | 0.089 | ||||
| pop3 | Microsoft Windows 2003 POP3 Service | 1.0 | Windows 2000 | 23 | 0.089 | ||
| pop3 | Microsoft Exchange 2003 pop3d | 6.5.7638.1 | Windows | 23 | 0.089 | ||
| http | WYM httpd | 1.0 | 23 | 0.089 | |||
| http | Allegro RomPager | 4.51 UPnP/1.0 | ZyXEL ZyWALL 2 | 23 | 0.089 | ||
| vnc | RealVNC Enterprise | protocol 4.1 | 22 | 0.086 | |||
| upnp | Microsoft Windows UPnP | Windows | 22 | 0.086 | |||
| http | Network Camera with Pan | Tilt | 22 | 0.086 | |||
| pop3 | Microsoft Exchange 2007-2010 pop3d | Windows | 21 | 0.082 | |||
| http-proxy | Squid http proxy | 2.6.STABLE12 | 21 | 0.082 | |||
| pop3 | MailMax pop3d | Windows | 20 | 0.078 | |||
| pop3 | ArGoSoft Plus | 1.8.9.2 | Windows | 20 | 0.078 | ||
| http | NetApp DFM httpd | 20 | 0.078 | ||||
| http | Apache | 2.2.3 | 20 | 0.078 |